$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e7f89197-feb9-305b-8ff3-b130f29ecf5a.roa File: e7f89197-feb9-305b-8ff3-b130f29ecf5a.roa (raw, json) Hash identifier: R8pNV9Lksm9ZYkf4GJ6oO29UGe7ihPPcUyy6w6dJKdc= Subject key identifier: A6:2C:A7:CA:4B:9A:51:CD:00:53:5E:7C:83:8D:1C:C4:36:6F:3E:82 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584905B6B69B4C41FC7EA5917D80 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e7f89197-feb9-305b-8ff3-b130f29ecf5a.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 16696 IP address blocks: 216.247.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b6:9b:4c:41:fc:7e:a5:91:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=4b81ad3e-b2ba-42d1-82f4-675bf0a2e7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b9:4a:56:dd:85:b5:db:61:70:51:5a:48:7d: e2:e6:62:ad:71:95:0d:06:43:5c:dd:19:11:15:30: 0a:7a:0a:cd:8c:9c:ef:18:53:65:19:26:d3:4b:11: 7a:ad:bd:75:b3:4e:00:da:24:a3:07:b4:7f:f8:b4: a0:bf:0e:91:2e:49:64:d1:8a:39:aa:bd:3b:32:bd: 58:89:3e:f6:50:d4:93:b5:38:f1:c8:01:b4:87:e5: 3b:ea:e8:b5:75:8c:2c:32:be:8a:80:33:8e:56:fb: e9:c9:3b:38:66:42:15:5d:9f:6b:68:f4:8b:0b:48: 51:8c:3a:e3:3c:c9:b3:6e:37:31:f5:cc:0a:bd:08: b1:98:c3:13:80:49:2a:58:e9:40:cd:86:40:ab:d6: 47:7e:1a:ff:5e:41:23:75:b1:31:26:86:30:74:ec: c8:af:d7:73:22:6b:6a:14:8b:40:25:aa:67:b2:c3: b0:e5:ed:12:3d:87:b5:d4:ac:52:ae:bd:f8:08:a7: 15:85:a0:64:e5:8c:4f:ac:9c:19:07:6b:8d:6e:6e: d6:35:8d:cd:11:e3:64:c9:f2:0f:11:26:f4:66:f0: e4:63:9c:96:0f:96:af:31:94:94:39:9b:fd:a2:0b: 88:93:6c:5b:3e:a4:46:6a:2b:16:ff:b5:12:98:e9: 9c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:2C:A7:CA:4B:9A:51:CD:00:53:5E:7C:83:8D:1C:C4:36:6F:3E:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e7f89197-feb9-305b-8ff3-b130f29ecf5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 216.247.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c7:75:6f:57:b1:76:83:cd:ca:a5:d2:dd:0f:4e:77:0b:b2: b3:68:9c:a0:50:ed:54:ff:bc:ab:58:11:4a:80:30:fe:55:39: 1e:2d:d1:3e:d8:a4:01:b6:c7:04:e7:70:2f:a5:61:32:87:a5: 55:83:2b:2b:fb:2f:7d:12:de:68:cc:80:6d:97:32:10:45:8b: 31:99:3a:ac:7f:6d:78:38:e4:c5:26:a8:8a:b4:6f:fa:ba:55: 01:9e:97:d5:83:de:51:19:86:61:40:80:09:4d:f0:f4:d1:a2: 8b:ff:02:98:08:c6:cf:23:b2:40:62:b9:f9:5a:85:de:45:b5: 92:3e:77:0a:c4:a6:d2:2f:32:28:63:e4:58:19:f1:22:db:f1: fc:82:b7:3a:56:da:05:17:2c:56:1d:9d:0b:14:85:fa:e1:4f: c1:de:7b:16:5f:86:59:57:dd:e1:ed:64:af:0a:d3:7c:4b:9f: d8:13:27:9b:c3:01:46:b6:63:7f:ba:2c:9f:a3:87:6a:e2:31: ee:7f:c2:43:07:53:8e:e3:09:e7:79:47:b3:e6:27:99:9d:0d: 21:54:aa:4f:d1:23:31:d9:cd:cb:18:1e:19:17:eb:f3:6e:bb: a1:13:cc:2b:37:ac:ad:e0:13:67:85:87:a6:06:dc:87:85:b0: 86:ba:85:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrabTEH8fqWRfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk NGI4MWFkM2UtYjJiYS00MmQxLTgyZjQtNjc1YmYwYTJlN2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorlKVt2FtdthcFFaSH3i5mKtcZUNBkNc3RkR FTAKegrNjJzvGFNlGSbTSxF6rb11s04A2iSjB7R/+LSgvw6RLklk0Yo5qr07Mr1Y iT72UNSTtTjxyAG0h+U76ui1dYwsMr6KgDOOVvvpyTs4ZkIVXZ9raPSLC0hRjDrj PMmzbjcx9cwKvQixmMMTgEkqWOlAzYZAq9ZHfhr/XkEjdbExJoYwdOzIr9dzImtq FItAJapnssOw5e0SPYe11KxSrr34CKcVhaBk5YxPrJwZB2uNbm7WNY3NEeNkyfIP ESb0ZvDkY5yWD5avMZSUOZv9oguIk2xbPqRGaisW/7USmOmcFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYsp8pLmlHNAFNefIONHMQ2bz6CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZTdmODkxOTctZmViOS0z MDViLThmZjMtYjEzMGYyOWVjZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Pf9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDHdW9XsXaDzcql0t0PTncLsrNonKBQ7VT/vKtYEUqAMP5VOR4t0T7Y pAG2xwTncC+lYTKHpVWDKyv7L30S3mjMgG2XMhBFizGZOqx/bXg45MUmqIq0b/q6 VQGel9WD3lEZhmFAgAlN8PTRoov/ApgIxs8jskBiuflahd5FtZI+dwrEptIvMihj 5FgZ8SLb8fyCtzpW2gUXLFYdnQsUhfrhT8HeexZfhllX3eHtZK8K03xLn9gTJ5vD AUa2Y3+6LJ+jh2riMe5/wkMHU47jCed5R7PmJ5mdDSFUqk/RIzHZzcsYHhkX6/Nu u6ETzCs3rK3gE2eFh6YG3IeFsIa6hQQ= -----END CERTIFICATE-----Generated at Thu May 8 21:11:50 2025 by rpki-client